Privacy Policy
Last updated: 11 October 2026
This policy explains how personal data is processed on the masalmerkezi.com website and in the "Masal Merkezi" and "İngilizce Masallar" mobile apps (together, the "Service"). The Service is provided by Masal Merkezi, the data controller. Contact: info@masalmerkezi.com.
In short
- We show no ads and use no advertising or analytics tracking libraries.
- You can read every tale without an account; in that case we collect no personal data from you.
- If you sign up, we keep only what the account needs to work and we never sell your data.
- You can delete your account at any time from the app or the website.
What data do we process?
If you sign up: your name, e-mail address, a one-way hashed version of your password, optionally your child's first name and age (only to suggest age-appropriate tales), your favorite tales, the tales you marked as read, and the dates your account was created and last used.
If you sign in with Google: with your consent Google sends us your name, e-mail address and a permanent identifier of your Google account. We never see your Google password. This information is used only to open your account and recognise you.
For everyone: for server, security and error logs the server briefly keeps the IP address, browser or device type and the requested page. Statistics such as how often a tale is read are counted without being linked to a person.
Tap-a-word translation: when you tap an English word, only that word is sent to our server. If it is not in our dictionary, our server asks the MyMemory translation service for that word only, without adding any information about you.
Kept only on your device: text size, theme, volume, the music you chose and music files you add from your device. These are never sent to our server. If you have no account, your favorites are also kept only on your device.
Why do we process it?
- To create your account, let you log in and keep your favorites in sync across devices (performance of a contract).
- To send password reset e-mails and reply to your messages.
- To keep the Service secure, prevent abuse and fix errors (legitimate interest).
- To meet our legal obligations.
We do not send marketing e-mails and we do not profile you.
Children's privacy
Masal Merkezi offers content for children, but accounts are meant for parents. We do not ask children for personal data directly; the child name and age fields are optional and filled in by the parent. The apps contain no ads, no in-app purchases and no chat. If you believe a child opened an account without your knowledge, write to info@masalmerkezi.com and we will delete it.
Sharing and transfers
We do not sell your data or share it for advertising. Data is hosted on our servers in Turkey. When you sign in with Google, the sign-in token issued by Google is sent back to Google to confirm that the sign-in really belongs to you; Google's own privacy policy also applies to that step. It may be shared with competent public authorities only where the law requires it.
Retention
Account data is kept until you delete your account. When you delete it, your name, e-mail, password, favorites and reading list are removed immediately and permanently. Server logs are kept for at most 6 months. Password reset links expire after one hour.
Security
Connections are encrypted with HTTPS, passwords are stored in a form that cannot be reversed and server access is restricted. No system is perfect; if a breach occurs we will inform the people affected and the authorities as the law requires.
Your rights
Under Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the GDPR, you have the right to access your data, ask for it to be corrected or deleted, object to its processing and receive a copy. You can correct your details in your account, delete the account yourself or write to info@masalmerkezi.com. See the KVKK Notice for details.
Changes
When we update this policy we change the date at the top of the page. We announce important changes on the site.